III - Administrative Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000427
<GroupDescription></GroupDescription>Group -
The Tanium Server certificate must be signed by a DoD certificate authority (CA).
<VulnDiscussion>The Tanium Server has the option to use a "self-signed" certificate or a trusted CA signed certificate for SSL connections. D...Rule Medium Severity -
SRG-APP-000516
<GroupDescription></GroupDescription>Group -
Tanium Server directory and subsequent files must be excluded from On-Access scan.
<VulnDiscussion>Similar to any other host-based applications, the Tanium Server is subject to the restrictions other system-level software ma...Rule Medium Severity -
SRG-APP-000416
<GroupDescription></GroupDescription>Group -
The SSLCipherSuite must be configured to disable weak encryption algorithms on the Tanium Server.
<VulnDiscussion>Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The application mu...Rule Medium Severity -
SRG-APP-000001
<GroupDescription></GroupDescription>Group -
The Tanium "max_soap_sessions_total" setting must be explicitly enabled to limit the number of simultaneous sessions.
<VulnDiscussion>Application management includes the ability to control the number of users and user sessions that utilize an application. Lim...Rule Medium Severity -
SRG-APP-000001
<GroupDescription></GroupDescription>Group -
The Tanium "max_soap_sessions_per_user" setting must be explicitly enabled to limit the number of simultaneous sessions.
<VulnDiscussion>Application management includes the ability to control the number of users and user sessions that utilize an application. Lim...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.